Array#flatten should copy taint/untrust to the returning value