Runtime is non-terminating:
- $ (explicit non-det choices) (Zing is able to manage them, but runtime is not)

TO solve: re-write TokenRing.p
Another issue: for non-det tests, output might differ from one run to another