ArgumentChecker: refuse null arguments, leave that to callers