Exit non-zero on error