diff --git a/project.config b/project.config
index de5ede1d3..c8c6df7fc 100644
--- a/project.config
+++ b/project.config
@@ -67,6 +67,7 @@
 	push = deny group Project Owners
 [access "refs/heads/testpush"]
 	push = deny group Project Owners
+	exclusiveGroupPermissions = push
 [notify "flashrom-gerrit"]
 	header = to
 	email = flashrom-gerrit@flashrom.org