scitokens-verify is a security risk #158
Description
scitokens-verify expects the token to be passed on the command line. That means for the short time it runs, the token shows up in ps -ef run by any unprivileged user on a machine. It should read from stdin, an environment variable, or a file.