Add With/Call for subprotocols
Check participant is in a protocol, statically

If we don't, we could get nonsense in sub-protocols, especially if we're
restricting participants, because that makes some assumptions about what
each participant must be. Make the assumption explicit!