diff --git a/roles/distgit/pagure/templates/pagure_shared.cfg b/roles/distgit/pagure/templates/pagure_shared.cfg
index 577b38f948..faca9925f9 100644
--- a/roles/distgit/pagure/templates/pagure_shared.cfg
+++ b/roles/distgit/pagure/templates/pagure_shared.cfg
@@ -61,8 +61,9 @@ GITOLITE_CELERY_QUEUE = 'gitolite_queue'
 
 BLACKLISTED_GROUPS = ['forks', 'group']
 
+{% if env == "staging" %}
 # ACL settings
-ACL_DEBUG = False
+ACL_DEBUG = True
 ACL_BLOCK_UNSPECIFIED = False
 ACL_PROTECTED_NAMESPACES = ['rpms', 'modules', 'container']
 RCM_GROUP = 'relenggroup'
@@ -71,12 +72,11 @@ RCM_BRANCHES = ['refs/heads/f[0-9]+']
 BLACKLIST_RES = ['refs/heads/c[0-9]+.*']
 # Pushing to (f|epel|el|olpc)(num+) that is not previously approved
 # (supported branches) is not allowed.
-BLACKLIST_SECOND_RES = ['refs/heads/f[0-9]+',
-                        'refs/heads/epel[0-9]+',
-			'refs/heads/el[0-9]+',
-			'refs/heads/olpc[0-9]+']
+UNSPECIFIED_BLACKLIST_RES = ['refs/heads/f[0-9]+',
+                             'refs/heads/epel[0-9]+',
+                             'refs/heads/el[0-9]+',
+                             'refs/heads/olpc[0-9]+']
 
-{% if env == "staging" %}
 ALLOW_HTTP_PUSH = True
 
 # repoSpanner setup