API change: users have to pass 'confirm' command

.. as the last command in the list