Group attributes should be available for provisioning

Requested by two different institutions. Group attribute values should be accessible to jexl in provisioners. The use case is that the same value is needed in multiple provisioners. Having separate values for multiple provisioners means that they could potentially get out of sync.