make access to private repos optional