limit actions / routes available to /repos