Remove unneeded 'create' from all tags sections

Look for all keys that begin with 'refs/tags' rather than just the
string literal 'refs/tags/*' when removing unneeded create permissions
from tag access sections.

Change-Id: I6dc226065166038700ffd324d354e617596888cb

tools/normalize_acl.py

@@ -70,12 +70,11 @@ for line in aclfd:
 aclfd.close()
 
 if '2' in transformations:
-    try:
-        acl['access "refs/tags/*"'] = [
-            x for x in acl['access "refs/tags/*"']
-            if not x.startswith('create = ')]
-    except KeyError:
-        pass
+    for key in acl:
+        if key.startswith('access "refs/tags/'):
+            acl[key] = [
+                x for x in acl[key]
+                if not x.startswith('create = ')]
 
 if '3' in transformations:
     try: