What if user calls `destroy()` multiple times? NPE...