Destroy-time references are not correctly or fully inverted when crossing module boundaries, causing cycle during apply.