A publication push will disable checks for commit membership in a more secure remote. We still should check if commits contain redacted commits, though. This is a potentially expensive operation, and means we need to check more commits by default (because we are checking more than just completely novel commits not belonging to any remote).