diff --git a/project.config b/project.config
index a46bdaf..83b0908 100644
--- a/project.config
+++ b/project.config
@@ -25,9 +25,6 @@
 	read = group mdb/kokoro-dedicated
 [access "refs/for/*"]
 	addPatchSet = group Registered Users
-[access "refs/for/refs/*"]
-	push = group Registered Users
-	pushMerge = group Registered Users
 [access "refs/heads/*"]
 	create = group Project Owners
 	create = group mdb/hafnium-admin
@@ -72,3 +69,6 @@
 	value = 0 No score
 	value = +1 Looks good to me, but someone else must approve
 	value = +2 Looks good to me, approved
+[access "refs/for/refs/heads/*"]
+	push = group Registered Users
+	pushMerge = group mdb/hafnium-access