access control for opattrs (memberof overlay)