How does this work for a private repository with access granted to additional contributors? Which setting is consulted then?