Clone values in create() to make sure and not tamper w/ user data.