Use Gitlab and you can at least prevent --force push with permissions.