untrusted committers code seems to be fully working