lean on log.Fatal rather than panic in all places

`log.Fatal()` seems like a fine way to express these failure cases.