An easy way to do this is to use the fork/pull request part with a build bot to push commits to the actual master once approved. That way nobody has access to t

An easy way to do this is to use the fork/pull request part with a build bot to push commits to the actual master once approved. That way nobody has access to the main repo, all they can do is pull request in, and you can do what ever you want to your own fork.