It seems there is a case where the user needs to confirm twice; or there is a dead code path, no?