Request to add role attributes to identities based on identity document

[abvaidya]

It will be very helpful if identities can get dynamic role attributes based on the identity document ( x509 certificate ). This will make it very easy to maintain policies in the environment with high churn rate for identities.