New branches protection

Protecting branch pattern foo/* to require signed commits prevents pushing non-signed commits to any existing foo/bar  branch. However, it does not seem to prevent pushing non-signed commits to a new foo/zug  branch: GitHub accepts the new branch and the commits.

Is this expected? Is there a way to prevent it?