It should not be a MUST, because the internal use of which you speak is itself optional. It MAY be pointed out in the draft, but it should be obvious and a matter of simple logic, that if one wishes to support creatorName, whose value is a DN, and the creators ID was given via uAuthzID, then there has to be a mapping. Paul