strengthen semantics of Gupdate

require in the bytecode semantics that only globals that are NONE can be
updated (i.e. they are write-once-only).