if the token can be obtained, it should be used (because of rate limiting), but it's only strictly required when requiring write access to the GitHub API (creating gist, posting comment in issue); `eb --from-pr` works fine without a token, so in that case it's optional (but slightly better to have access to it)