@Override
    protected List<String> determineRequestedAttributeDefinitions(final RegisteredServiceAttributeReleasePolicyContext context) {
        val scriptFactory = ExecutableCompiledScriptFactory.findExecutableCompiledScriptFactory();
        return getAllowedAttributes()
            .stream()
            .filter(key -> scriptFactory.isEmpty() || !scriptFactory.get().isInlineScript(key))
            .collect(Collectors.toList());
    }
Return only the collection of allowed attributes out of what's resolved
for the principal.

@author Misagh Moayyed
@since 4.1.0
core/cas-server-core-authentication-attributes/src/main/java/org/apereo/cas/services/ReturnAllowedAttributeReleasePolicy.java