crypt32: Forbid minimum or maximum fields in name constraints.