What is the recommended practice for extending user profiles and making them readable by anonymous users? Is it better to add new attributes to the user class and change the role policies, or to create a new class and associate it with the user class? How is it done on this site?