enabled feature flags: ci_secure_files_read_only, talisman installed as pre-receive hook