authentication features can be modified by resource processors

Use case: a login from a new person authenticated by Switch Edu-Id may or may not be accepted depending on whether his email or shib-id is known. This can be determined by a resource processor that tells the authentication service whether a local typo3 account can be created or not.