Currently this is not supported but people have raised this as need. Many project that are intended to be open-sourced start out on a private repo until its mature enough to be announced. I do have a plan for this, that involves orivate grasp-endpoints per group using NIP-42 auth, but I want to gauge the demand and how much this is really a blocker for adoption.