Require defensive copy