How is their restriction any less permissive than other OSI-approved licenses' attribution clauses?