This is already pretty common across a lot of open source projects due to parasitic hijacking of compute time and space, in Kubernetes non-members can't run CI without having an ok-to-test label on their PR