the fact that `repair: false` can require write-privileges (on standalones) is unintuitive and the result of this implicit repair step.

We should make the step false by default and add an option for it