NameConstraints fixes #463

Job	Run time
smoke (enable-all, --enable-all)	4m 12s
smoke (cryptonly, --enable-cryptonly)	1m 47s
smoke (integration, --enable-openssh --enable-lighty --enable-stunnel --enable-opensslextra)	3m 0s
smoke (dtls-suite, --enable-psk --enable-dtls --enable-dtls13 --enable-dtls-mtu --enable-aesccm -...	4m 4s
smoke (opensslextra, --enable-opensslextra)	2m 37s
smoke (sanitize-asan, --enable-all, -fsanitize=address -fno-omit-frame-pointer -g -O1, -fsanitize...	4m 54s
smoke (enable-all-smallstack, --enable-all --enable-smallstack)	4m 23s
smoke (default)	2m 0s
smoke (leantls-extra, --enable-leantls --enable-session-ticket --enable-sni --enable-opensslextra)	1m 57s
	28m 54s

Provide feedback