Yup. Actually, clients should own their entire "stack." That is, repo org, tools for deploying, etc., etc., etc. At any given moment, you should be able to hand the client the keys (read: user names and passwords) to THEIR castle. They paid for it.

If you honesly believe in agency there is no other way.