netfilter: nft_limit: reject configurations that cause integer overflow