Binary files can be whitelisted with the special line 'Adds-Binary:
<path/to/binary/file>' included in the commit message body. Deliberately
checked-in binary files should be very rare.
With minimal effort, this could probably be repurposed as a local
postcommit hook.