allow free form values in attributes

e.g. for Scott:

first_name -> Scott
last_name -> Smith
middle_name -> NULL
user_name -> scott.smith (we turn this into a Kerberos principal)
email_forward -> smith@gravity.phys.uwm.edu
id -> 882 (canonical identifier that does not change, unlike names)