Closed georific closed 5 years ago
I would definitely argue that the default method for having tokens allows authors to easily hide them from repositories, as typically you do not want to expose your private keys.
If these changes (haven't reviewed them thoroughly) would allow either method to work, then both should be documented appropriately, outlining the risks of key exposure using this method.
Attempting to address #43