destroyed

Set once, so a second destroy is a no-op rather than a crash.