Maintainers should be allowed to make a call about whether a package is backport-able or not. Auto-generated backports by nixpkgs-ci should be mergeable via bot.

I think essentially the same conditions should apply as for the original PR. I assume... that just means adding the nixpkgs-ci app to the list of users which are OK to merge PRs from?