limit OP_PUNCH_HOLE operations to the file size