@MacLemon @flowfx To be fair, though, that's a general point on *all* password sharing mechanismus. (See also: https://www.passwordstore.org/)
Inherently, it's impossible to rescind knowledge.
A dishonest authorized user can always just make a copy/memorize everything. Git just makes this slightly easier by automatically providing old copies.