(ITS#5384) access control: "attrs" field handled incorrectly in URI form of sets