defensive copies