A "force_once" is a thunk that can only be forced once. Subsequent forces
will raise an exception.
create f creates a new force_once
force t runs the thunk if it hadn't already been forced, else it raises an
ignore () = create (fun () -> ())