[JoshTriplett]

I'm hoping this leads to being able to set the permissions for GitHub Actions tokens as well. For instance, an organization should be able to say "the token for this action should also have read-only access to check out other organization private repositories".