prevents user from watching repos without having push access