I put a pre-receive git hook in place to prevent security branches. If any reference name contains secur, vulnerab, or privat (uppercase or lowercase) it is denied. I did a few tests. But it may need some more testing. We will talk about this during our phone call. Then we will document this. Jeremy C. Reed ISC