Would it be possible to add something similar to Apache's SSLPassPhraseDialog exec:/path/to/program directive?

There is no way to be alerted to blocked pushes right now, and I generally don't think this is useful enough to include in the upstream. This interaction could possibly be more clear, but feels like something we just stick in the documentation to me.