See also
http://www.openldap.org/lists/openldap-devel/200811/msg00000.html
and specifically
http://www.openldap.org/lists/openldap-devel/200811/msg00006.html
dontUseCopy needs to be fixed, but specific "disallow" flags could be added to alter per-RFC4511 behavior.
p.