proto: If our meta-cell handler rejects a cell, kill off the circuit

Right now, I think, when we call a meta-cell handler, we only handle the error by sending it along the one-shot channel to the caller. But probably we should also kill off the circuit.

Found while working on #525 (closed)