Add `ensure-atomically` macro