Going further, make it dry run by default and have an --execute flag to actually run the commands: this encourages the user to check the dryrun output first.