Eugen

Currently there are 2 security issues for `hubot-stackstorm` due to dependencies:  First is `axios`, which should be fixed in https://github.com/StackStorm/st2client.js/pull/76, thanks to @bgaeddert  Second is `lodash.template` 

I don't see any significant benefit in removing token comparing to other tasks, but not opposted with the change itself. To make it happen, please check other StackStorm repos if...

I found this PR pretty minimal and easy to change, I'm probably missing some background discussion around https://github.com/StackStorm/hubot-stackstorm/pull/133. As for other dependent repos that rely on token in chatops, -...

It depends on Hubot Adapter you use. Some may have this specific functionality, some may not. See https://github.com/hubotio/hubot/issues/1356#issuecomment-311435096 with useful topic mentions. Also in theory, it might be possible to...

@blag Seems like `eventsource` is used on [`st2client` side](https://github.com/StackStorm/st2client.js/blob/master/lib/mixins/streamable.js). I would try to reproduce and debug the issue itself first (restart st2 services + debug st2chatops) , trying to understand...

@jinpingh Take a look at one edge case example of this: https://github.com/StackStorm/hubot-stackstorm/issues/157#issuecomment-504168117

Thanks @blag! The logic LGTM. The only requirement is to test the installer script end-to-end once we'll have the st2 https://github.com/StackStorm/st2/pull/4173 merged.

@blag Per previous discussion, did you end-to-end test this change manually and can confirm working behavior? We need to ensure that it doesn't break anything prior merging.

> Either that, or change st2 CLI to create directories and file if they don't exist yet, but that's a lot more involved. Agree, that's the point which I'd like...

With this release timing pressure, I've made a change to this PR to have a more simplified & working st2 config behavior in scripted installer. Per quick manual tests it...