Destroy nodes before destroying the node factory

For the common case this doesn't matter (as it happens anyway for the
built-in document processors), but the more short-lived external processor
can break that.