diff --git a/common/flatpak-context.c b/common/flatpak-context.c
index 6d0a6ab2..7a70b057 100644
--- a/common/flatpak-context.c
+++ b/common/flatpak-context.c
@@ -3711,8 +3711,9 @@ flatpak_context_make_sandboxed (FlatpakContext *context)
   /* We drop almost everything from the app permission, except
    * multiarch which is inherited, to make sure app code keeps
    * running. */
-  FlatpakPermission *multiarch =
-    g_hash_table_lookup (context->features_permissions, "multiarch");
+  g_autoptr(FlatpakPermission) multiarch =
+    flatpak_permission_dup (g_hash_table_lookup (context->features_permissions,
+                                                 "multiarch"));
 
   g_hash_table_remove_all (context->shares_permissions);
   g_hash_table_remove_all (context->socket_permissions);
@@ -3723,7 +3724,7 @@ flatpak_context_make_sandboxed (FlatpakContext *context)
     {
       g_hash_table_insert (context->features_permissions,
                            g_strdup ("multiarch"),
-                           flatpak_permission_dup (multiarch));
+                           g_steal_pointer (&multiarch));
     }
 
   g_hash_table_remove_all (context->persistent);