Change Internal::Control destructor to protected

No match.