pub proof fn pptr_usize_with_identity(p: PointsTo<usize>)
pptr_usize_with(p, p.mem_contents()) == p,
Setting a PointsTo<usize> to its own contents is a no-op.
PointsTo<usize>