sql-sanitize should show the sanitization operations prior to prompting

I'm not sure why, but sql-sanitize prompt the user and asks if they want to sanitize, and does not show the operations that will be performed until after the user confirms -- by which time it is, of course, too late.

This PR moves the confirm down a few lines in the code, so the user can read the sanitization operations before deciding whether to go ahead with it or not.