Application attributes and user privileges.
Optional
App attributes. This structure can also contain extra user-defined attributes.
Application privileges. Hints to the client what actions the user is allowed to perform. Could be any of:
Application attributes and user privileges.