Make github token file user-readable only