Decide on best practices for addon object destruction

Ref !296

There are multiple possible strategies addon objects can adopt when their base object is destroyed:

• Make the addon object inert
• Make it a protocol error to send any request other than destroy after the base object is destroyed
• Make it a protocol error to destroy the base object before the addon object

We should pick a strategy and use it for all new protocols unless there is a strong reason not to.