cleanup routine in the error case. This means we no longer need to compile a special version of alloc.o for visudo.