security check on ll_destroy