User attributes hook and exposed properties

[jsumners]

Plugins that register a user attributes hook function should be able to register, or at least expose, the properties they will return when the hook is invoked. The should also be able to receive configuration, during hook invocation, that limits the properties returned.

This will allow any admin interface to implement per service restrictions.