Require user confirmation for data wipe