I am by no means an authority on SPC but from what I was taught and Demining also says this, but the control limits should be set on the basis of 3 sigma not on customer specs as the capability of the process is whatever the data is telling you it is.
As in safety, you can state any target you like but you will get nothing better that what the process is capable of delivering. Is that not the case?