Notary: replace OTCleanup with std::unique_ptr