I think that both RFC 2251 and X.511 are fairly clear in regards to update operations. I think the only real issue is whether bind MUST, MUST NOT, SHOULD, SHOULD NOT, MAY or MAY NOT do aliasing dereferencing. I would suggest "SHOULD NOT" as it this does not disallow an implementation from doing so, but makes it clear that dereferencing is not expected behavior.