pub fn safe_destroy_foos<'a>(foos: &'a [Foo])