Fix ensure() macro