latest keybase now uses XDG_HOME_* directories. yay!
may as well auto-update brew. I never ignore updates, anyway
safer npm-update:

see https://gist.github.com/othiym23/4ac31155da23962afd0e
editorconfig-vim still broken. and sleuth isn't needed right now