UX: require confirmation of revoking permissions on
repos/user groups/repo groups. We don't want people to
click on this accidentally.