alter: disallow truncation of system spaces

It is unsafe, because system spaces use triggers to keep records in sync
with internal objects while space truncation doesn't invoke triggers.

Closes #2523