Replace "run load; run update" with conditionalized "run load update".

The latter version stops when "run load" fails for whatever reasons
rendering the combination *a lot* more secure.

Signed-off-by: Detlev Zundel <dzu@denx.de>
diff --git a/include/configs/yosemite.h b/include/configs/yosemite.h
index 225308f..c9323f6 100644
--- a/include/configs/yosemite.h
+++ b/include/configs/yosemite.h
@@ -209,7 +209,7 @@
 	"update=protect off fff80000 ffffffff;era fff80000 ffffffff;"	\
 		"cp.b 200000 fff80000 80000;"			        \
 		"setenv filesize;saveenv\0"				\
-	"upd=run load;run update\0"					\
+	"upd=run load update\0"						\
 	""
 #define CONFIG_BOOTCOMMAND	"run flash_self"