pattern "net.example.project.{private,security}*" allow "joe@example.net" allow "jim@example.net" comment "everyone can read these branches" pattern "net.example.{public,project}*" allow "*"