You don’t really have to use keys with github - we have already browser oauth2 authentication in place.
Make sure you follow: