restrict git commands to just pull