Safeguards and limits in the Kyoto Protocol