4 space indent.
Document using tokens with --pass, add security concern to README, and link to Keychain Access gist by @klmr.