Require confirmation for destructive installs