API improvements:

- `update` now takes a list of field to update in a single statement
- remove `caller` param for `grant` and `revoke` as well