It's not obvious at all that publish really, really wants to push to upstream programmatically at the end