s4:dsdb Use possibleInferiors to restrict creation of child objects