Finally the choice was to support a new SELFDN keyword in binding rules, as it is easier to read (than using targattrfilter).

https://fedorahosted.org/389/attachment/ticket/47653/0005-Ticket-47653-Need-a-way-to-allow-users-to-create-ent.patch