restrict configurations to administrable repos only