Change Internal::Control destructor to protected