I don't feel comfortable my GH token being read like that and since I use Nix to manage my system I quickly wrapped `gh auth token ..`[2] to return a fake token and so far nothing breaks.