I am busy writing a .NET Core console app (which will become a .NET Core Global tool), and one of the things I need to do is store sensitive information such as GitHub access tokens, as my console app can access GitHub on behalf of the user. As part of the configuration process, when the user first runs the application, they will supply this information.

So what is the best way (or place) to store such sensitive information (which the user supplies at runtime) in a .NET Core console app?

Keep in mind that this app will run on Windows, macOS and Linux