sql-sanitize should show the sanitization operations before prompting the user for action