Changed CA2000 to a warning

There are genuine reasons why we don't want this to fire - factory
methods which return something which is IDisposable - we can review any
warnings and address as necessary.