EC-US profile: single value for current nationality attribute

["Tolbert, John W" <john.w.tolbert@boeing.com>]

To answer the question that arose on the TC call this AM, regarding the
possibility of using multiple values for "current nationality"...

From http://www.bis.doc.gov/deemedexports/deemedexportsfaqs.html:

"For individuals who are citizens of more than one foreign country, or
have citizenship in one foreign country and permanent residence in
another, as a general policy, the last permanent resident status or
citizenship obtained governs...   If, for some reason, the status of a
foreign national is not certain, then you should ask the Bureau of
Export Administration (BXA), to determine where the stronger ties lie,
based on the facts of the specific case."   
Essentially, last citizenship (or query result from BXA)  takes
precendence in EAR decisions, so "current nationality" should not take
multiple values.  With that, I think I'll leave the draft "as-is",
unless anyone objects:  
Nationality
Nationality values applicable to a subject SHALL be designated with the
following attribute identifier:
	urn:oasis:names:tc:xacml:3.0:ec-us:subject:nationality
The DataType of this attribute is
http://www.w3.org/2001/XMLSchema#string. The value of this attribute
MUST be in the range of 2-letter country codes defined by [ISO3166].
A request context may have several instances of this attribute to
reflect multiple citizenships held by a subject.  Nationality must
include country of birth if different from other nationalities held by
the subject.
Current nationality
The most recent nationality value applicable to a subject SHALL be
designated with the following attribute identifier:
	urn:oasis:names:tc:xacml:3.0:ec-us:subject:current-nationality
The DataType of this attribute is
http://www.w3.org/2001/XMLSchema#string. The value of this attribute
MUST be in the range of 2-letter country codes defined by [ISO3166].