protected Map<String, List<Object>> resolveAttributesFromPrincipalAttributeRepository(final RegisteredServiceAttributeReleasePolicyContext context) {
        val repository = getRegisteredServicePrincipalAttributesRepository(context);
        LOGGER.debug("Using principal attribute repository [{}] to retrieve attributes", repository);
        val attributes = repository.getAttributes(context);
        LOGGER.debug("Attributes retrieved from principal attribute repository for [{}] are [{}]", context.getPrincipal().getId(), attributes);
        return attributes;
    }
Post load, after having loaded the bean via JPA, etc.
core/cas-server-core-authentication-attributes/src/main/java/org/apereo/cas/services/AbstractRegisteredServiceAttributeReleasePolicy.java