Allow resource servers to obtain access token additional authorization attributes.