Fixes a minor off-by-one error in the update hook.

Not sure it actually causes any problems yet, especially since we don't
support branch-level ACLs yet.