don't leak arguments
don't leak values