use Fatalf not Fatal when using format arguments (caught by vet)