Owning.
Formal parameters and fields are NotOwning by default. Method return types are
@Owning by default. Constructor results are always @Owning.
When the -AnoLightweightOwnership command-line argument is passed to the checker, this
annotation and Owning are ignored.