Or host it on a Tor hidden service!
A tor-ified github clone would be interesting. You'd probably see a lot of cool pro-freedom software projects that are illegal in their originating country, like this one.
Actually I've been thinking about it so many times that I'm surprised that nobody did it yet. "Hidden Gitlab", anyone?
A bunch of version control'd child porn is what I'd be scared of.
It's a crime in the U.S., it's not a crime in my country. But this guy has listed American University's email address, so I would definitely remove this software if I were him.
In fact, if I were him, I would find someone not from the U.S. to host the repository, make it private, give him the read/write privileges and then occasionally push the changes to a new public repo (so that the .git folder is different and one could not track the changes as they happen).
But that's just me...