diff --git a/project.config b/project.config
index f6ac0e10c..55c6b67d1 100644
--- a/project.config
+++ b/project.config
@@ -45,6 +45,7 @@
 	owner = group user/Angel Pons (Th3Fanbus)
 	owner = group user/David Hendricks (dhendrix)
 	owner = group user/build bot (Jenkins) (jenkins)
+	read = block group user/Nico Huber (Nico)
 [access "refs/heads/*"]
 	exclusiveGroupPermissions = create delete label-Code-Review submit
 	create = group user/Anastasia Klimchuk (aklm)
@@ -59,7 +60,7 @@
 	label-Code-Review = -2..+2 group flashrom developers
 	label-Code-Review = -1..+2 group flashrom reviewers
 	label-Code-Review = -1..+1 group Registered Users
-	label-Code-Review = block group user/Nico Huber (Nico)
+	label-Code-Review = block -2..-2 group user/Nico Huber (Nico)
 	label-Verified = -1..+1 group flashrom developers
 [access "refs/for/refs/heads/stable"]
 	exclusiveGroupPermissions = push