Add read_registry to list of needed permissions for personal access tokens, docker push does not work without it.