How does giving them deploy access prevent them from breaking the build, too?