Fix: missing argument to block.
support nested `expose` declarations
regard nested exposures as "safe"