prove set-theoretic axiom of choice

inherited from HOL's