Don't leak the OAUTH token
Use a token with push bits for opam
./autogen.sh