It should be possible to configure range limits on sub objects, and then writes outside this range should be aborted with an error.