push only public to untrusted host, faster scripts