I am trying to define branch permissions on a hotfix branch in bitbucket. What are the recommended (or best practice) set of permissions that should be applied?