Capture variables which appear in AddressOf expressions by reference. Fixes #641