add option to allow any valid user to clone or push