[Ada] Illegal protected calls in inherited pre/postconditions