diff --git a/groups b/groups
index 44dbb1b..9e3fe2e 100644
--- a/groups
+++ b/groups
@@ -1,6 +1,7 @@
-# UUID                 	Group Name
+# UUID                                  	Group Name
 #
-global:Anonymous-Users 	Anonymous Users
-global:Project-Owners  	Project Owners
-global:Registered-Users	Registered Users
-mdb:upspin-admin       	mdb/upspin-admin
+d651a8840b2b5a967d0b04d4b0208969394c3010	nobody
+global:Anonymous-Users                  	Anonymous Users
+global:Project-Owners                   	Project Owners
+global:Registered-Users                 	Registered Users
+mdb:upspin-admin                        	mdb/upspin-admin
diff --git a/project.config b/project.config
index c0a4296..2027f24 100644
--- a/project.config
+++ b/project.config
@@ -30,6 +30,7 @@
 	submit = group mdb/upspin-admin
 	editTopicName = +force group Project Owners
 	editTopicName = +force group mdb/upspin-admin
+	push = +force group nobody
 [access "refs/meta/config"]
 	exclusiveGroupPermissions = read
 	read = group Project Owners