When a shadow CIB is in use, crm_attribute --lifetime=forever correctly records the attribute in the shadow CIB, but crm_attribute --lifetime=reboot records the attribute in the live CIB, which seems like a bad idea.
Shadow CIBs don't have a status section, so we should either silently ignore such attempts or return an error for them.