I'm tweaking an O365 driver and noticed that in the
"sub-ctp-HandleAttributes" the netiq packages use:

do-strip-xpath expression='./modify-attr[@attr-name="CN"]'

I know if the event was an add or instance, do-strip-op-attr would
still kick in. However in this case the rule is already scoped to only
apply to modifies.

So is there any reason why they didn't use do-strip-op-attr here

Both will remove the remove-all-values child element, which they
selectively add back in.