[libvirt PATCH 1/3] vircgroup: enforce range limit for cpu.shares