Coverage Metrics for Model Checking