I forgot about the security feature by GitHub: oauth_authorization.destroy – Personal access token (API) deleted automatically (found in a public repository)