For our deployment systems/targets we use simply git read only accounts to pull changes in a git repository. Currently you need to create a stash-user for that which increase your license user count. IMHO there should be an option to allow git repository access for non-stash-users, so that these users can't login in stash but pull changes from defined repositories.