This prevents deploy token from getting permissions for users that
happen to have the same id as the deploy token.