Use Choice.succeed and Choice.failwith uniformly at call sites
Eliminate exceptions from dest_forall