fails:Object#dup preserves untrusted state from the original
