It looks like the method of uploading a python package is deprecated. This is what I get when I run
python setup.py sdist upload -r local
Submitting dist/<package>.tar.gz to https://<PROJECT>.appspot.com/
Upload failed (403): Forbidden
WARNING: Uploading via this command is deprecated
error: Upload failed (403): Forbidden
I redacted URL and package
So the config.json should have the hashed password and the ~/pypirc the unhashed one right?