There is no good reason for _set_delegate() to be called more than
once. It should enforce this restriction and throw an exception if
an existing non-null Delegate is already set. This may allow simpler
statements to be made about the object reference security model.