ccanlint: allow per-file restrictions, so we don't have to remove all tests.