Currently GitHub's
public_repo
Oauth flows requests read/write access to all public repos, including orgs; Begin should provide some alternate means of authorization that enables more refined scope of permissions.