Pass registry entity directly to remove_callbacks_for

Previously there was an issue where server callbacks were failing
due to a deadlock occuring when callbacks were being removed.

This patch modifies the removal process so that it can be invoked
within a safe context by passing the handler to the registry
entity directly to the remove_callbacks_for helper method
UI: no need to check if attacker defines update_gfx method

Small optimization fix