Rust closures: Double free safety