added ability to need to confirm potentially dangerous actions, such as turning off all instances in a region