implement confirmation/rollback for --shell --interactive