I talked a bit about this on IRC, but I agree that this should be left in.

For a "solution", would you be opposed to forbidding TLS accesses once it's being destroyed? Instead of being `Option` it could be something like `Uninitialized | Initialized(obj) | Destroying`. I'm not really sure how a failure could be done, I imagine that the normal `fail!` macro would cause problems.

This cyclic dependency between annihilation and TLS is tricky...