This is a pre-copyedited, author-produced version of an article accepted for publication in International Conference on Interactive Theorem Proving following peer review. The version of record is available https://link.springer.com/chapter/10.1007%2F978-3-319-43144-4_18