Tags can only be pushed by a committer today and pypi is guarded by comitter roles as well.