Now thanks to a better review from NSS team, and some other back and
forth, we have a patch!
https://fedorahosted.org/389/ticket/397
https://fedorahosted.org/389/attachment/ticket/397/0001-Ticket-397-Add-PB...
--
Sincerely,
William Brown
Software Engineer
Red Hat, Brisbane