Assign default add patch set permission on refs/for/*

By default each user should be able to add patch sets on all open changes.
We have created a new permission to lock changes, such that only
the change owner or a specific group can add new patchsets to exisitng
changes.
diff --git a/groups b/groups
index 8146a7a..f8da529 100644
--- a/groups
+++ b/groups
@@ -1,7 +1,7 @@
-# UUID                 	Group Name
+# UUID                                                        	Group Name
 #
+global:Anonymous-Users                                        	Anonymous Users
+global:Project-Owners                                         	Project Owners
+global:Registered-Users                                       	Registered Users
 google:AI2Pq9r_ksT_hfUOny8swsG8krQwPL5eOM0hGHf4QWGOPdy9igqsdhs	google/google-union:signcla
-global:Anonymous-Users 	Anonymous Users
-global:Project-Owners  	Project Owners
-global:Registered-Users	Registered Users
-mdb:nginx-ninja        	mdb/nginx-ninja
+mdb:nginx-ninja                                               	mdb/nginx-ninja
diff --git a/project.config b/project.config
index 6c0254f..dfd00ba 100644
--- a/project.config
+++ b/project.config
@@ -62,3 +62,5 @@
 	value =  0 No score
 	value = +1 Looks good to me, but someone else must approve
 	value = +2 Looks good to me, approved
+[access "refs/for/*"]
+	addPatchSet = group Registered Users