Is it expected that if a non-org-member makes a pull request, the CI build will fail because of missing secret values?