Cyber Command nominee: attacks must come with a cost