Implement access restrictions via gitolite

[peterkeen]

The only people who should be able to push to a repo or run commands are writers for that repo. It should reject everyone else. Gitolite provides facilites for this kind of access control. See Easy.pm

Also apps should either run as that user or an app-specific user. Look into creating new users at app creation time.