MAC/do: Move destroy() to a better place

No functional change intended.

Reviewed by: bapt
Approved by: markj (mentor)
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D47604

(cherry picked from commit 73cecc0ef78e49295cd9cd8df1bf271f5b8c437d)