restrictive covenant design