Personally, I'd go for #3. CC-BY is just one small step up from PD, so I really don't see the practical harm.3. Label them CC-BY so the Wellcome Trust can get a mandatory attribution, which we would do anyway1. Ignore them (pity)2. Upload them as public domain and re-iterate the National Portrait Gallery issue, and teach them that these open content wiki people are not to be trusted