Make it difficult (or impossible) to mess up the master branch

[stefano.menci]

I did it again: I messed up the production app because its branch wasn’t read only