Util: Make its destructor private

A singleton class should not be destroyed by a user, instead it lives as long as the process lives.

We therefore make it private. The destructor also only does something on Windows when using a window for the device server.

User's wanting to perform server shutdown can use Util::shutdown_ds or Util::server_cleanup before process exit.

Close #1444 (closed)