[389-users] Restrict read/search permission on attribute with certain value?