Towards Model Checking VDM