#52 (comment)
From @lgierth
Move the token file to something like $HOME/.protocol/dnsimple.token -- just so it's never underneath the repo directory and there's no chance of ever accidentally committing it.
You can just assume that people put it there out-of-band (dnslink.sh will fail on its own).