Only encrypt to keys with encrypt capability
Allow deleting remote refs
Use batch-check to use only the remote_has commits we also have locally