Re-add GitHub deny options

This change is _required_ at the top level to protect Gerrit
from a potential thread leak and to prevent it from trying
to replicate to repositories that do not exist on the receiving
side.

Signed-off-by: Linux Foundation Administrators <collab-it+onlab@linuxfoundation.org>
Signed-off-by: Andrew Grimberg <agrimberg@linuxfoundation.org>
diff --git a/groups b/groups
index c718f42..0cba1eb 100644
--- a/groups
+++ b/groups
@@ -1,10 +1,12 @@
 # UUID                                  	Group Name
 #
+2a10ec5934b3fecac3781fe7d5dedc172e21d459	GitHub Replication - OpenCord
 4f32b523380e68c8595bdf27a006c697ea17bade	Non-Interactive Users
 61317511a4a11254cbbf9612896412663548965a	Administrators
 63e77955f1e6a49cb3169e4d3ec0a9fd30380c11	Read-only Users
 7177c81018e69d9a1b1f6f940aad91fbbba574d1	CORD Committers
 9a1085ebc62ecb78f5b25e928a96a84655b4d565	ONF CLA Accepted
+ea0401fd666860cbc94b2132ff9d30a0e10d60e9	GitHub Replication - Open-Cloud
 global:Anonymous-Users                  	Anonymous Users
 global:Project-Owners                   	Project Owners
 global:Registered-Users                 	Registered Users
diff --git a/project.config b/project.config
index 6096971..2b92bef 100644
--- a/project.config
+++ b/project.config
@@ -15,6 +15,8 @@
 	createProject = group CORD Committers
 	accessDatabase = group user/Brian O'Connor (bocon)
 [access "refs/*"]
+	read = deny group GitHub Replication - Open-Cloud
+	read = deny group GitHub Replication - OpenCord
 	read = group Administrators
 	read = group Anonymous Users
 	read = group Non-Interactive Users