Token default to unencrypted, so we don't need to exclude pull requests