xkb: some more request length checks

The only one that seems really necessary is the GetCountedStrings one, the others are more nice to haves.

cc @p12tic