Currently, we only support Gitlab's `Private-Token` header. It would be preferable to generalise this