pathsymb coverage metric is naive

[simonjwinwood]

The coverage analysis used by the pathsymb strategy tries to ensure that every choice point is hit at least once, but for slices without lots of choice points this means that only a few models are produced. The strategy should be extended to use e.g. byte value coverage to get more models.