https://bugs.openldap.org/show_bug.cgi?id=7392
--- Comment #5 from Ondřej Kuzník ondra@mistotebe.net --- I'm not so sure this is actually viable, allowing a self<permission> like what's requested would allow selfwrite with a blanket delete which is contrary to what our documentation says about selfwrite? Don't know how to square those two and I think there is a way to write acls that achieve the same intent by splitting them somewhat?