diff --git a/gerrit/client/init.yml b/gerrit/client/init.yml
index 8803f06..20b7463 100644
--- a/gerrit/client/init.yml
+++ b/gerrit/client/init.yml
@@ -42,6 +42,9 @@
           actions:
           - name: read
             group: Non-Interactive Users
+          - name: read
+            group: Anonymous Users
+            deny: true
         "refs/heads/*":
           actions:
           - name: abandon