I think the docs are misleading for this, and we could easily leak Augeas instances, especially as it's marked public.  Can we mark this private and abstract the calls from `flush` so users don't need to worry about this internal distinction?