Index: render/conf/users.t
==================================================================
--- render/conf/users.t
+++ render/conf/users.t
@@ -364,11 +364,11 @@
 			else
 				ulst:lpush('<a href="?show='):ppush(modes[i]):lpush('">')
 					:ppush(modes[i]):lpush('</a>')
 			end
 		end
-		var users: lib.mem.lstptr(lib.store.actor)
+		var users: lib.mem.lstptr(lib.store.actor) defer users:free()
 		if mode == mode_local then
 			users = co.srv:actor_enum_local()
 		else
 			users = co.srv:actor_enum()
 		end
@@ -393,11 +393,11 @@
 			else
 				ulst:lpush('<span class="id">')
 				lib.render.nym(usr, 0, &ulst, false)
 				ulst:lpush('</span></li>')
 			end
-		::skip::end
+		::skip:: users(i):free() end
 		ulst:lpush('</ul>')
 
 		if co.who.rights.powers.invite() or co.who.rights.invites > 0 then
 			ulst:lpush('<details><summary>create new user</summary><form method="post"><div class="elem"><label for="handle">handle</label><input type="text" name="handle" id="handle" placeholder="')
 			suggest_handle(&ulst)

Index: render/media-gallery.t
==================================================================
--- render/media-gallery.t
+++ render/media-gallery.t
@@ -27,10 +27,11 @@
 		if path.ct >= 3 and path(1):cmp('a') then
 			var id, idok = lib.math.shorthand.parse(path(2).ptr, path(2).ct)
 			if not idok then goto e404 end
 			var art = co.srv:artifact_fetch(uid, id)
 			if not art then goto e404 end
+			defer art:free()
 			if path.ct == 3 then
 			-- sniff out the artifact type and display the appropriate viewer
 				var artid = cs(art(0).url)
 				var btns: lib.str.acc
 				if owner then

Index: srv.t
==================================================================
--- srv.t
+++ srv.t
@@ -712,10 +712,11 @@
 		lib.report('closing data source ', src.id.ptr, '(', src.backend.id, ')')
 		src:close()
 	end
 	self.sources:free()
 	self.pool:free()
+	self.cfg:free()
 end
 
 terra cfgcache:cfstr(name: pstring)
 	return self.overlord:conf_get(&self._pool, name)
 end