must_be_empty asserts twice