Can't you ask to expand the permission once that becomes relevant? I imagine that people who just want to try bubble don't want to give you all their private code.