diff --git a/project.config b/project.config
index c0a4296..2027f24 100644
--- a/project.config
+++ b/project.config
@@ -30,6 +30,7 @@
 	submit = group mdb/upspin-admin
 	editTopicName = +force group Project Owners
 	editTopicName = +force group mdb/upspin-admin
+	push = +force group nobody
 [access "refs/meta/config"]
 	exclusiveGroupPermissions = read
 	read = group Project Owners