Checked destructor