Modify access rules

project.config

diff --git a/project.config b/project.config
index 6837695..93d9994 100644
--- a/project.config
+++ b/project.config
@@ -21,7 +21,7 @@
 	forgeAuthor = group may-forge-author-identity
 	forgeCommitter = group gerritbot
 	label-Code-Review = -2..+2 group approvers
-	label-Trust = 0..+1 group approvers
+	label-Trust = +0..+1 group approvers
 	label-Code-Review = -1..+1 group Registered Users
 	submit = group approvers
 	editTopicName = group approvers
@@ -86,6 +86,8 @@
 	forgeAuthor = group release-managers
 	forgeCommitter = group release-managers
 	push = +force group release-managers
+[access "refs/for/refs/meta/config"]
+	push = group mdb/golang-gob-eng-policy
 [accounts]
 	sameGroupVisibility = deny group google/google-union:signcla
 [contributor-agreement "Google CLA"]
@@ -98,11 +100,10 @@
 	administrateServer = group mdb/golang-gob-owners
 	gerrit-google-manageUsersGet = group gobot
 	gerrit-google-manageUsersGet = group mdb/copybara-git-readers
+	gerrit-google-manageUsersGet = group mdb/copybara-git-readers
 	viewAccess = group gobot
 	viewAllAccounts = group gobot
 	viewAllAccounts = group mdb/copybara-git-readers
-[access "refs/for/refs/meta/config"]
-	push = group mdb/golang-gob-eng-policy
 [notify "checkins"]
 	header = to
 	email = golang-checkins@googlegroups.com