Introduce QIs without hierarchy in AttributeType and allow more than one
sensitive attribute in DataDefinition