to avoid relying on user+password in the gitconfig (and make it more easily revokable just in case…)