AC profile - Policy Authority on the Role attribute

["Andy Dowling" <andy.dowling@xxxxxx>]

section 4.4.5 of the ac profile document states the following:

   The roleAuthority field MUST NOT be used. The roleName field MUST be
   present, and roleName MUST use the uniformResourceIdentifier CHOICE
   of the GeneralName.

This means that we cannot define a policy authority for the role attribute!
:-(
Previously, where we used IETFAttrSyntax, we were able to qualify the
attribute
in this way.

Could we change the profile to allow the use of roleAuthority, i.e.:

   The roleAuthority field MAY be used to specify the issuing authority of
the role attribute.
   The roleName field MUST be
   present, and roleName MUST use the uniformResourceIdentifier CHOICE
   of the GeneralName.

Any comments?

Andy