Security fix: you can't force it to put a different repo under anothers bundle id