Christopher Dale [off-list ref] writes:
...
trusted path execution policies. These systems require that any file
that can be executed exhibit at least the following characteristics:
* The executable, it's directory, and each directory above it are
not writable.
Since the hooks directory is within a directory that by it's very nature
requires write permissions,...
Sorry, but I am not interested at all. If you can write into $GIT_DIR/config
then you can point at any directory with hooks.directory and that would mean
it would defeat your "trusted path execution policies".