Make node's copy constructor protected

This allows subclasses to actually subclass libflo::node.