Safer argument pass