Yeah, I think I wrote that before System.Security.Cryptography.Native existed.  And I was probably being lazy with "oh, the lifetime threat is small" vs calling SetHandleAsInvalid.  Not things I'd let others get away with.  ::smacks self on the hand:: Bad Jeremy. 