git lfs? works http-only, but is auth handled by tokens etc, do we get away by leaving it as-is? newlines probably break value decode/encode ssh_config universal interface. non-git-id specific retain comments