exit if clang-format returns nonzero