@mr_ligi @pedrouid @Netlify @letsencrypt True. @github apps have introduced that, although that was not previously the case, which is why we implemented this in the least intrusive way available, never receiving creds.
The process of creating a well integrated @GitHub app takes a little time. (but watch this space! 🙂)