The master should be protected so that force pushes are disallowed. It will also help users mirroring the repo to be able to limit the mirroring to only protected branches (at the moment this results in no branches being mirrored or all branches being mirrored).