MetAcsl: Specification and Verification of High-Level Properties