[capi-sig] Can we explicitly specify that the limited API can't be used in subinterpreters?