more robust kill: not always running on Isabelle_Thread (e.g. POSIX_Interrupt handler);