Add option to retrieve oauthtoken from a password store

git-hub

@@ -343,6 +343,14 @@ class Config:
     def __init__(self):
         self.username = git_config('username', getpass.getuser())
         self.oauthtoken = git_config('oauthtoken')
+        self.oauthtokencmd = git_config('oauthtokencmd')
+        if self.oauthtokencmd is not None:
+            try:
+                self.oauthtoken = subprocess.check_output(
+                        self.oauthtokencmd, shell=True).strip()
+            except (OSError, subprocess.CalledProcessError) as e:
+                die("Failed to run oauthtokencmd `{}`: {}",
+                    self.oauthtokencmd, e)
         self.upstream = git_config('upstream')
         if self.upstream and '/' not in self.upstream:
             die("Invalid hub.upstream configuration, '/' not found")

man.rst

@@ -479,6 +479,10 @@ from. These are the git config keys used:
   required, you shouldn't need to set this variable manually. Use the `setup`
   command instead.
 
+`hub.oauthtokencmd`
+  A command to retrieve the oauth token from a password store.
+  When set, `hub.oauthtoken` isn't needed.
+
 `hub.upstream` required
   Blessed repository used to get the issues from and make the pull requests to.
   The format is *<owner>/<project>*. This option can be automatically set by