https://bugs.openldap.org/show_bug.cgi?id=10019
--- Comment #3 from Ondřej Kuzník ondra@mistotebe.net --- In terms of manageDSAit, the policy is not to generate virtual attributes when that's set. One reason is so that replication clients do not receive them.