Use xpcall with error handler