Today’s post is half a quick note, half public shaming. In other words, it is a reminder to be very careful with OAuth tokens and passwords. As part of moving to emacs, I starting using the incredibly useful gh.el. When you first use it, the extension saves either your password or an OAuth token in your .