excluding attribute in acl

[Marc]

Is it possible to specify something like allow access to all attributes - 
userPassword?