protected boolean isAttributeAllowedForRelease(final String attributeName) {
        return !neverReleaseAttributes.contains(attributeName)
               && (onlyReleaseAttributes.isEmpty() || onlyReleaseAttributes.contains(attributeName));
    }
Default AuthenticationAttributeReleasePolicy implementation.

@author Daniel Frett
@since 5.2.0
core/cas-server-core-authentication-attributes/src/main/java/org/apereo/cas/authentication/DefaultAuthenticationAttributeReleasePolicy.java