Don't leak the OAUTH token
Use a token with push bits for opam