Prove that all delegations are to existing pools

[WhatisRT]

Alternatively, it might be better to drop that property for performance reasons. Then we don't need to prove it obviously.