To make the scheme secure it is required that private keys will be < q/2 . The range proof is to be for 2^l/2 as well.