default behaviour for down is to apply all down migrations, which is
comparable to dropping a database - and usually not the desired default
action
proposed changes:
* `down` prompts for a confirm `y` before applying all down migrations, defaulting to doing nothing
* `down --all` does the current behaviour, applying all down migrations
* `down N` is unchanged
* `down N --all` errors
* `down --all N` errors