Actually the `gh clone` wraps up all the complexity with enterprise authn/authz, Tokens/PATs, multi-org SSO/MFA, etc really well. This alone is the reason I use gh.