Preventing control constraint violations by use of energy balances for a class of coupled systems: Applied to a power plant.