Use oauth2 for deployment instead of passwords