runtime: Fix missing _Nonnull