s4:objectclass LDB module - "add operation" - reject creation of LSA specific objects