not being able to transfer for a grace period is pretty standard practice. the two statuses: clientUpdateProhibited and clientTransferProhibited, are security measures to prevent fraud. i.e., they have to contact their registrar in order to make changes, i would assume not through a control panel.