gssh: Hold ref before destroying state

Otherwise the task completion unrefs us, and we bomb out in
g_object_notify().