Add confirmation for `vagrant destroy`

The standard behavior is to ask confirmation from the user unless `--force/-f` option is specified.

This builds on top of #80. I'll rebase when that gets merged or declined. Unless this gets declined too, of course. =)