Don't encrypt repo_token; it's not supposed to be necessary at all for public projects, and making it encrypted would prevent coverage reports on pull-requests.