Disallow submit except by mdb/gerritcodereview.

groups

diff --git a/groups b/groups
index fd27453..02eda2f 100644
--- a/groups
+++ b/groups
@@ -4,3 +4,4 @@
 global:Project-Owners  	Project Owners
 global:Registered-Users	Registered Users
 mdb:akaros             	mdb/akaros
+mdb:gerritcodereview   	mdb/gerritcodereview

project.config

diff --git a/project.config b/project.config
index a8ddb5c..c4c32f1 100644
--- a/project.config
+++ b/project.config
@@ -27,8 +27,9 @@
 	label-Code-Review = -2..+2 group Project Owners
 	label-Code-Review = -2..+2 group mdb/akaros
 	label-Code-Review = -1..+1 group Registered Users
-	submit = group Project Owners
-	submit = group mdb/akaros
+	submit = deny group Project Owners
+	submit = deny group mdb/akaros
+	submit = group mdb/gerritcodereview
 	editTopicName = +force group Project Owners
 	editTopicName = +force group mdb/akaros
 [access "refs/meta/config"]