Actually it isn't valid according to Structured Data Testing Tool.
I tried this tonight, using the following
rel="publisher nofollow"
and it failed to validate the publisher. As soon as I removed the nofollow is validated ok again.
I thought I would post my answer, as I came across this thread after doing a Google search for the same question.