sub DESTROY {
  my $self = shift;
  { local $@; eval { $self->whatever() }; }
  die "cleanup failed" unless $self->cleanup;
}