How to implement a type guard for a tree that checks only allowed keys and values, including nested subtrees? How to ensure O(1) complexity in the worst case for key checking?