reducing visibility on QuantifiedFormula constructor