It asks for permission to update not just issues but my public repositories as well. Does that mean that I am giving him full rights to commit stuff to my repos by posting a comment?