Telling a reciever not to accept new firmware versions will NOT block a re-hit. Dish sends re-hit's to every reciever at certain intervals. The new yellow cards will actually lose thier authorizations if not connected to the stream for a while. That scheme will allow dish to kill the bazillion kill hits that are currently needed for deactivation blue cards when the card swap is complete.
I recently bought a new 811. It still had the old programming on it. Took my time activating it, as I was trying to pull in my locals OTA. After 2 days it got the re-hit to kill what it had.
So give it a few days, and that reciever will get a rehit to go to what it is supposed to, irregardless if it's set to accept new programming or not.