Please can you look to implement secret support so webhooks don't have to be hardcoded?