https://bugs.openldap.org/show_bug.cgi?id=9794
--- Comment #2 from David Coutadeur david.coutadeur@gmail.com --- Seems a good summary.
It does not describe the behaviour when a pwdChangedTime is sent and the user does not have the right to change it. But as it is the same behaviour as in a LDAP standard operation, maybe it is not so useful.
And it may be interesting to have a reminder of the relax rule, but maybe it is more appropriate in documentation than in draft.