Add missing os.Exit to package-level Fatal()