Deny 'Blocked Users' from reading all refs

May help in preventing spam.

Change-Id: I48a65eb7aa4f38601d4aeb1d560c74cb54e640f1

groups

diff --git a/groups b/groups
index 44a0f24..f9db0aa 100644
--- a/groups
+++ b/groups
@@ -1,5 +1,6 @@
 # UUID                                  	Group Name
 #
+00fba069826520dec109eef49f3914dde6f1673f	Blocked Users
 18cf7f27ecb1f1d727d16d5dfeaf019d9b9f5c83	Administrators
 2d17ca3ba578ebe9e0798efc4ca023f2685f7856	aom-googlers
 6aa943a8d1abd393ddcd472d7f0d857acb942d46	aom-interns

project.config

diff --git a/project.config b/project.config
index b9f4d39..374b6ae 100644
--- a/project.config
+++ b/project.config
@@ -8,6 +8,7 @@
 [submit]
 	mergeContent = true
 [access "refs/*"]
+	read = deny group Blocked Users
 	read = group Administrators
 	read = group Anonymous Users
 	revert = deny group Anonymous Users
@@ -89,7 +90,8 @@
 	overrideIf = label:Bot-Commit=+1 AND -label:Code-Review=MIN
 	canOverrideInChildProjects = true
 [submit-requirement "No-Unresolved-Comments"]
-	description = Changes that have unresolved comments are not submittable. Unless overridden with "Unresolved-Comment-Reason: <reason>" line in change message.
-	overrideIf = message:\"^.*Unresolved-Comment-Reason:.*\"
+	description = Changes that have unresolved comments are not submittable. Unless overridden with Unresolved-Comment-Reason: <reason> line in change message.
 	applicableIf = has:unresolved
-	submittableIf = -has:unresolved
\ No newline at end of file
+	submittableIf = -has:unresolved
+	overrideIf = message:\"^.*Unresolved-Comment-Reason:.*\"
+	canOverrideInChildProjects = false