web commit by http://madduck.myopenid.com/: clarify denyNonFastForwards