It sets config the way `-c` does, with the value read from the environment,
so a pushurl set through it has to reach the URL this resolves. The separated
spelling also takes the next word: left unrecognised, `remote.origin.pushurl=VAR`
was read as the subcommand, and a subcommand that is not `push` ends the
verdict having checked neither the host allowlist nor the blocked branch.
It is the last of git's global options that takes a separate value and was
neither skipped in pairs nor refused.
branderson
6bf63c8325