refs https://github.com/TryGhost/Team/issues/2795
- perhaps we need better config to enforce this from the get-go