Require distinct image from current one when starting a new
rolling-update, and exit with error if an existing in-progress update
is targeting a different image.