Fix a fencepost I was pretty sure I had already fixed (I checked; the

other places were still fixed).  NB: a lock on [x,y] protects a KMS of
up to y+1 bytes.