Writing to PR branches should really be some new kind of permission.