Review access change

Change-Id: Idefadbff36b37eee7e880c89338e1451886ef733
Reviewed-on: https://go-review.googlesource.com/c/All-Projects/+/218503
Reviewed-by: Filippo Valsorda <filippo@golang.org>
diff --git a/project.config b/project.config
index 9b226d4..76e04b4 100644
--- a/project.config
+++ b/project.config
@@ -86,6 +86,10 @@
 [access "^refs/heads/release-branch.+"]
 	exclusiveGroupPermissions = submit
 	submit = group release-managers
+[access "^refs/heads/release-branch(.+)-security$"]
+	forgeAuthor = group release-managers
+	forgeCommitter = group release-managers
+	push = +force group release-managers
 [accounts]
 	sameGroupVisibility = deny group contributed-in-past
 	sameGroupVisibility = deny group google/google-union:signcla
@@ -98,16 +102,13 @@
 	accepted = group ldap/employees
 	accepted = group ldap/interns
 [capability]
+	administrateServer = group Project Owners
 	administrateServer = group admins
 	gerrit-google-manageUsersGet = group gobot
 	gerrit-google-manageUsersGet = group mdb/copybara-git-readers
 	viewAccess = group gobot
 	viewAllAccounts = group gobot
 	viewAllAccounts = group mdb/copybara-git-readers
-[access "^refs/heads/release-branch(.+)-security$"]
-	forgeAuthor = group release-managers
-	forgeCommitter = group release-managers
-	push = +force group release-managers
 [notify "checkins"]
 	header = to
 	email = golang-checkins@googlegroups.com