Merge "`cert_client` minion `signing_policy` list for VNC CA cert is un-hardcoded" into release/proposed/2019.2.0
diff --git a/gerrit/client/init.yml b/gerrit/client/init.yml
index 4ed374e..6ff90e7 100644
--- a/gerrit/client/init.yml
+++ b/gerrit/client/init.yml
@@ -39,6 +39,9 @@
           actions:
           - name: read
             group: Non-Interactive Users
+          - name: read
+            group: Anonymous Users
+            deny: true
         "refs/heads/*":
           actions:
           - name: abandon