The caller is responsible for providing a secure git repo. I will document this in the comment. Currently, it will only support repos on github with alphanumeric names. 

subprocess allows us to pass an ssh key to git without ever writing to the file system. Without an ssh key, this is not necessary.