On Missing Attributes in Access Control: Non-deterministic and Probabilistic Attribute Retrieval