fails:Object#clone preserves untrusted state from the original
