If the dns_request send callback is delayed, the dst API would get deinitialized and then the detach from the tsig key would cause an assertion failure. Shutdown the isc_managers early, and only then dereference the dst objects when cleaning up the resources used by nsupdate.