This is a good thing, but I've got an awkward "chicken and egg" situation. My dotfiles are stored on GitHub, which I pull using username/password. The scripts then sets up and adds a new SSH key to GitHub.
You can still use a PAT (personal access token) to authenticate via HTTPS. Instead of sending username and password, you send username and the PAT token for authentication
