update-all-{config,hooks}: refuse to run as root