Enforce positive/negative samples for restricted_str

[luto]

The restricted_str-type allows to supply a regex for string validation. This can get complex quite quickly. Currently there is no way to automatically test the supplied regex. Implement a mandatory testcases-parameter, which must contain at least one positive and one negative test case. The test cases are execute each time the parameter is loaded. If one of the tests fail, deny execution.