yup! basically you can either have a) a 'special' org account used only occasionally b) everyone attributed as themselves c) full-fat local feed, mirrored+filtered to Github, never use Github web UI for anything d) a security nightmare