Private repos don't work - auth_crl should be used always

[jsoref]

For private repos (which can have forks), curl requests will not work without a bearer token.

Runs will fail like this:

Error parsing pull requests
{
  "message": "Not Found",
  "documentation_url": "https://docs.github.com/rest/reference/pulls#list-pull-requests"
}
jq: error (at /dev/fd/63:4): Cannot index string with string "locked"