statically enforce the invariant that a key has at least one value