don't use confirm in errors, it can have bad side-effects