This makes sense, because some hooks will fail if the security master
and origin master are very different, but we know (from the generated
command) that the use of push here is safe.