What gates who can sign things? Just the "only build for tags" bit which can only be overridden by a committer?