Have ensureNonNegative() error instead of warn

[Alomir]

Currently, ensureNonNegative() throws a warning when the input variable is below zero (or, really, below -eps). When we have sufficient confidence in the model (which may be now, or at least once #359 goes in), we should convert this to an error.