Fix the case where the service seg faults when it is destroyed because an exception happens during configuration time.

Added limited module type and unit tests.
The limited module type is similar to a global module (and uses the same interface) except one specifies in its configuration how many concurrent threads are allowed to call the module.