cli: return non-zero status on errors