Stop isn't safe to call from devices thread

It was a goal to make Stop safe to use from either thread, but I
believe I was unsuccessful in attempting to arrange that. Explicitly
disallow this.
Fix a segfault

Why was this crashing?  I don't know.  But it was.