allow exportable attributes of any privacy level
Based on !2018 (merged) and !2016 (merged)
So far we had the artificial restriction to only allow attributes of privacy level 0. Recently we discussed that this is too restrictive and at the same time not all that necessary. @goettel do you still think we should go ahead with this?