--autounmask-write: only prompt when necessary