DestructionRootPinnable delegate

An entity that implements this delegate gets a DoNotDestroy flag that can be checked as part of the destruction process. An entity that is intended to be the root of an entity graph must implement the DestructionRootPinnable delegate if it is to be used in personal data destruction.