pub const GITHUB: Profile;Expand description
The credential GitHub calls client_secret is sent and revealed, so
an attestation publishes it and nothing here is confidential. The two
sessions are served by DIFFERENT hosts – which is why one pinned
authority per profile would be wrong.