Put credentials (username and API token) into a configuration file rather than storing them in the script itself. This reduces the likelihood of the token accidentally getting uploaded somewhere. This necessitated addition of a new error code in the case that the credential file is not found, which required rearrangement of existing error codes to maintain descending order of checks. Obviously this will break anything relying on the exit status, but nothing does that.