of course, that just becomes where do you want to restrict that? We do it with RBAC on the Git repositories, and then atomic repository settings sorta like we do here. You have to be in LDAP/AD, and you have to be in the right group, then you have to be granted access to those specific things, and then the repo rules have to allow you to do the things you want to do and then with peer review. There’s so many atomic buttons to twiddle and fine-tune the access, that particular hammer is kind of like a “last resort”