Yep, this is what I do now. The dry run is the default, you have to flag `--really` to do anything permanent.