Slack’s “oops, you checked your API token into GitHub, lol” detection is eerily good — just a few seconds between “d’oh” and “your token has been disabled”. Kudos to whichever smart people made that work.