the configuration object, see tas3.new_conf_to_cf()
additional attributes that are passed to PDP
session object, from which most attributes come
0 on deny (for any reason, e.g. indeterminate), or non-null if permit.