PSPNG Attribute Provisioning: Attribute Values and allProvisionedAttributePrefix

PSPNG's attribute-provisioning configuration uses two attribute-value-related properties, and they should be consistent with each other:

provisionedAttributeValueFormat ("Template"): Generates a value for each group

allProvisionedAttributePrefix ("Prefix"): (optional) defines which values should be removed when they don't reflect groups selected for provisioning by pspng

When these disagree (eg, when Template/provisionedAttributeValueFormat generates groups that don't fall under Prefix/allProvisionedAttributePrefix), the full-sync cleanup will remove selected groups which will then have to be reprovisioned by the next FullSync.

This JIRA is recommending that the provisioner not do any provisioning/deprovisioning if Template/provisionedAttributeValueFormat  ever generates a value that is not covered by the Prefix/allProvisionedAttributePrefix.