They could be pointing to an environment variable or a number of things. I'm not sure if there's a good way for Github to deal with things like that without affecting at least some users.
edit:..I guess they could just validate that it's a key.
There probably aren't many, howto and examples come to mind.