Could be interesting to use https://pkg.go.dev/github.com/keybase/go-keychain instead of storing the cached creds in the statefile