more work on untrusted committers