Runtime enforcement of @Nonnul