Ensure errors go to stderr