think gh-only is a fair assumption for now

did we add some way to restrict to an "allowed set" of gh users?