[xacml-comment] D006 & D008

Hi,

Both these tests expect a response of (Deny,ok)... but the policies
include a reference to an undefined attribute with mustbepresent set,
so I think the result should be (Indeterminate,missing-attribute).

John