Two new posts on the excellent blog of Shawn Farkas talk about how to securely impersonate, and that a simple try/finally will not do it. extremely recommended.

UPDATE
Shawn shows a more elegant solution (besides that he uses vb.net :) leveraging anonymous delegates, generics and SafeHandle.