enforce exit code == 0