It seems to me that I can add someone's DID as a delegate for a repository, and this doesn't need them accepting it. This means I could maliciously add someone to a repository they object to and they have no way to avoid this. Should we make a new delegate accept explicitly?