Make a throwaway GitHub account just for it and give it PR access to your private repos.

But the whole point of remote control was to avoid that situation.

that's actually a good idea. Thanks, was not thinking about such a workaround!