use "jac" for conveying attribute certificates