Don't grant FORGE_COMMITTER to existing PUSH_HEAD rights. That
is considered a bug that we are fixing with this schema upgrade.
Administrators might need to relax permissions manually after the
upgrade if that forgery is critical to their workflow.