pub fn safe_destroy_foo<'a>(foo: &'a Foo)