Devs on my team have been publishing their locally-made builds to github. I want to prevent them from being able to do this. I did a bit of research, and got to thinking perhaps I need to prevent them from having the packages:write scope, shown here: