Why does user permissions plugin not transform the response?

[WardenCommander]

Any chance of incremental adoption, example to have option in config:

1. to allow data->attributes,
2. later to allow without data->attributes
3. to have default data->attributes