Guarded Impredicativity