Say that ECH acceptance is signaled at most once

[martinthomson]

Thanks for not doing this; it is easier to do it twice and check it twice than have extra logic for not checking.