Quantified array expressions in ensures.