use nullobj for cross-browser Object.create(null)