Deploy-only bugfix: never trust db_update

Turns out, errors are handled by exception anyway.  The result of
db_update is the num_affected, which is unuseful when doing auditing
because often the targeted row will not change.

Change-Id: I36aca2413f2d50a97b16b825cbdf281652f8ee15