All development git repos have now been changed to allow dangerous changes, so that we can rebase in branches before merging.
But we do not want that to happen on master, so we need to inhibit --force pushes to master.
That should be doable using Herald rules. If so, having a global rule to that effect would be nice.