limit users who can run the checkout with git robot