add more args to turn off pulling
switch around the no-pull arg check
also turn off pulling for service manipulation
bump boxen and change credential script to support 2fa.
Merge pull request #396 from boxen/two_factor_support

Add two-factor support
Merge pull request #387 from boxen/pull_less

don't auto-update on some local-only operations
Formatting
Upgrade boxen gem to 2.0.3 to fix the public email issue

Fixes boxen/boxen#111
Merge remote-tracking branch 'upstream/master'

* upstream/master:
  Upgrade boxen gem to 2.0.3 to fix the public email issue
  Formatting
  bump boxen and change credential script to support 2fa.
  also turn off pulling for service manipulation
  switch around the no-pull arg check
  add more args to turn off pulling