store the oauth token in the Keychain as well
KEYCHAIN_SERVICE -> KEYCHAIN_PASSWORD_SERVICE
we control the stderr, let's ignore it