I generally find this policy sensible. This is how current git-svn users work anyway. Although I use git a bit I would very appreciate git commands examples for each point in this document. Other than this I think that maybe allowing push-merge should be one time permission to avoid situation that someone forget about having push-merge privilege. As I understand push-merge will not be so common anyway.
Marcin Bukat