Connection: add guard in destroy()