this will allow for easier adoption and will prevent users from having to manually override permissions for the workflow https://github.com/mitchellh/gon seems like something that can work?