Prevent element deletion once directly in a dataset

The DestroyElement endpoints must check that this specified element is not in ANY dataset before being deleted.

Do not handle children being in datasets.