Thanks, that's good to know. On closer reading I realize I misinterpreted the following passage in the docs:

...there is no provision for applying package attributes to 'cloned' copies of subroutines used as closures.

I misinterpreted this as referring to all closures.