Make Ad Hoc Attribute Guidance Stricter

[benno]

Ad Hoc Attribute namespaces should be required to use domain name style labels. The top level domain (university.edu) must be owned by the entity (university, company, etc) defining the attribute. The entity may partition this space however it likes. Absent a central management scheme, however, subdomains (its.university.edu) should map to DNS domains.