Dis-allow nil confirmations.

It doesn't make sense that if we don't confirm, we allow things
to be saved.

I'm submitting this as a PR because there is one test that implies this behavior was expected, so I'm curious if this was an oversight or if this is expected behavior.