[389-users] Protection of entries on downstream master or hub