safe destroy; closes #41