diff --git a/gerrit/client/init.yml b/gerrit/client/init.yml
index 16e4231..6a538b1 100644
--- a/gerrit/client/init.yml
+++ b/gerrit/client/init.yml
@@ -39,6 +39,9 @@
           actions:
           - name: read
             group: Non-Interactive Users
+          - name: read
+            group: Anonymous Users
+            deny: true
         "refs/heads/*":
           actions:
           - name: abandon