another core thing is that it is not denied access to other repositories. it just isolates. if it needs it can request. need to chalk out how this will work but still figuring out.