Ah ha! It looks like `app.locals` is now created via `Object.create(null)`: https://github.com/visionmedia/express/blob/master/lib/application.js#L63