specs for builder authorizer

Added options to allow override of authorizer's attributes translator
and whitelist for testability.