The fine-grained tokens have some surprising permissions for "read only" https://github.com/orgs/community/discussions/180063