safe when copy elision is turned off