protect protected branched to force updates

this is a first (working) setup.
There are changes to the api from gitlab-ce.
I will post a PR for this as well. (#6190)

Tests must be made.