rc.subr: add some sanity checks for service jails

Add some sanity checks when service jails are used in jails:

• children.max > 0
• children.max - children.cur > 0

The nesting is too deep at those places to have a sane formatting, so no
line wrapping at the usual column.
If someone has a better idea how to format this: feel free to go ahead.