Either restrict subclassing or reserve ivar space

This allows ABI stability with the fragile ABI.