About time; locking down pull request surface area at the repository level without hacky automation is a clean win.