ipmi: fix use after free in _ipmi_destroy_user()