BZ-1122594: improved restriction on external git access based on roles