put verbose messages to stderr

egypt pointed out we'll stomp on the payload output
otherwise. Good catch