This will leak as there's no corresponding `CFRelease`