Enforce positive/negative samples for restricted_str

The `restricted_str`-type allows to supply a regex for string validation. This can get complex quite quickly. Currently there is no way to automatically test the supplied regex. Implement a mandatory `testcases`-parameter, which must contain at least one positive and one negative test case. The test cases are execute each time the parameter is loaded. If one of the tests fail, deny execution.