Just in case someone else runs into this. We were finding our bitbucket server being overloaded by a bunch of git processes that looked like:
git branch -a --contains <sha1>
For one of our repos with thousands of branches, this process would sometimes take over 20 seconds to run each. It turns out that this was being done by the 'Push Email Notifier'.
We'll likely be switching to something else going forwards.