Authorize dynamic attributes for object list serializaton (fixes #31)