jayvdb added a comment.
Thanks @legoktm. At Lyon Hackathon we fetched that password and used it to create an account on a new empty wiki for https://phabricator.wikimedia.org/T100802.
An alternative is to use a constant suffix for all 'unsafe' wikis. i.e. in .travis.yml use "${PYWIKIBOT2_USERNAME}-unsafe" e.g. 'Pywikibot-test-unsafe' for the Github 'wikimedia' account, and it would be "JVbot-test-unsafe" for mine, etc.
Another option is to globally lock the 'Pywikibot-test' account on the production wikis - we'd probably need to create a separate task to test and fix any unit test breakages caused by testing with a globally locked account, but I suspect their wouldnt be many as the test suite doesnt edit (or attempt to edit) using the 'Pywikibot-test' account.
TASK DETAIL https://phabricator.wikimedia.org/T100797
EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/
To: jayvdb Cc: Legoktm, jayvdb, Aklapper, pywikipedia-bugs