Gitolite is a lightweight tool for managing access control to Git repositories. We use it at the FSF and it works pretty well. AFAICT, I've managed to avoid propogating Perl, but I have to propagate OpenSSH and Git for now. They are referenced in too many scripts in too many ways for a regexp substitution to do a good job. Fixing this requires working with the upstream maintainers, I think.