Limit scope of CN name constraints