[SROA] Add an off-by-default *strict* inbounds check to SROA. I had SROA