ApiUser now has a boolean 'indestructible' which raises an exception before destroy.'