Remove plus2 access for pushing outside refs/for/refs

This should, if I read https://gerrit-review.googlesource.com/Documentation/access-control.html correctly, not interfer with the ability to upload changes.

Change-Id: I8aaa33f706a2fb33343c131bd0841379997cdc7e