Under the circumstance, I am thinking that one way to go about getting the required attribute data is to add 'accessFlag' attribute at the required rdn. This is going to be duplicate piece of data and any updates to 'accessFlag', would now result in two updates. However, I will be able to save multiple reads. In my scenario, we do lot more reads than the updates on the 'accessFlag' field.
If you're confident you can keep those flags in sync, then it's probably the easiest way to go.
p.