deriving from AbstractEntityDeNormalizer instead of AbstractAuthorizationService to control person attribute visibiliity