command: destroy should ask for confirmation always