kx509: Prevent double free