limit action of ContactConstraint to penetration