disallow invalid pushes