remove ACSL lemmas (now in Coq)
use predicate BitstreamUnchanged
use predicate NotLeftSet64