Currently GitHub's public_repo Oauth flows requests read/write access to all public repos, including orgs; Begin should provide some alternate means of authorization that enables more refined scope of permissions. See also: https://begin.canny.io/feature-requests/p/more-granular-github-scopes