This record is fully atprotated, but won't work properly:
- repo owner foo invites bar to the repository
- bar invites baz to the repository
- bar get removed from collaborator list (from foo's PDS)
- now bar is not part of the repo collaborators, but have authority to remove baz from the repo.
We don't ingest the collaborator deletion events yet, but this needs some redesign.
ahh just realized we don't allow collaborators to invite other right now.
I'll leave this issue open because we will eventually need that feature and then problem still exist.