Defer destruction of the old filesystem tree until after expensive API call

This minimizes the time in which the filesystem is visible in an inconsistent state during refresh.