You're right, I think we should set it to null in Release(). @suwatch?

This will make sure we get a hard crash if any client code tries to release without owning.