A rc of -4 means that you are trying to modify a read only field.
The refresh attribute does not correlate to a field on a CA Top Secret ACID, so there is nothing to modify.
The Refresh option, when set to Y, will issue a REFRESH command for a modify operation.
Trying to set Refresh to N, will cause the error being seen here.
When issuing an LDAP Add of a new Acid, do not send refresh = n.