Allow deployment keys to push tags?

This is a duplicate of BCLOUD-11266. However, that ticket was resolved as essentially a duplicate of https://bitbucket.org/site/master/issue/8873/extend-deployment-keys-to-allow-both-read, and that ticket is a somewhat different request.

I don't really want deployment keys to have full write access, but it would be super helpful (and I think within the spirit of what they are for) if they could push tags. Would it be feasible to allow them to do only that? Or maybe to allow them to push refs but not commits?