Prevent last superadmin from being deleted.

Refactors and improves destroyable() for Domain and User.