I have client computers that I want to require the entry of user name and password before they can interact with the remote. I want it to be one of our developers who does any pushing/pulling, not a lab tech. Ideally, they also could not "add a new repo" and see the list of repos (my other clients) on Bitbucket. If there is a better approach I am open to it.