I never got the email for this review so I never responded, but I do think it's worth replying on the github point since I should make that clearer in the readme - it's to account for tokens from files added from github.