Refcount: Assertion against releasing when not retained