Basically you're right, the problem is, gitlab itself goes into the repository directories and uses the git binary to do some stuff. If you have different users for GitLab and GitLab Shell it wont work anymore - so I removed the possibility to define a separate user for GitLab Shell