Current, the authentication provider uses an OAuth App. GitHub's recommendation is to migrate to a GitHub app. VSO also requires a token from a GH app, so at the very least, their requests should use a new GH app.