Confirm exiting emacs, to prevent :q / :x blunders