Note that raise_on_save_failure affects destroy (Fixes #763)