Wrap pgbackups:transfer in confirm

Wrap the actual transfer in pgbackups:transfer in a confirm block, because it's
destructive.

alternative to #60