Thanks to mvz comments: dup was missing. Remove the comment "never symbolize user given params, symbols are never garbage collected, could lead to an easy DoS"
No need to complexify this block