Use inOrder for call verification

As suggested by xiaom@, this does a much better job actually asserting
the mock interactions.

This CL was almost entirely written by Gemini, which also snuck in a
s/var/val/ change (a legit one at that).

Test: TH
Flag: EXEMPT mainline
Change-Id: Ic94efff965bf2a372085e7859cf3817ebde162c1