__attribute__((cleanup)) cleans up on scope exit, unlike go.