[09:15:40] hey group :) , i'm in the process of setting up a dedicated build machine for the ML team and I reached the stage where I would like to push images to the WMF registry. for that purpose I would need a new set of credentials specific to the team/machine that shouldn't be able to push to the /restricted namespace. what's the best way to go about this? [10:15:43] I *think* you can take inspiration from https://phabricator.wikimedia.org/T386189, although this is only for pulling [10:23:33] will check thx