moving repository permissions settings to a separate class - they don't belong in authentication info