The assertion triggered in BF-22149 implies that there's a theoretical possibility that the SSM cleanup hook is called more than once. However, since it seems to be infeasible to reproduce the BF on demand, there is no way to prove this is happening.

In order to understand what's causing the BF, we should add an invariant inside the cleanup hook that ensures that the hook isn't executed more than once.