Centralize sensitive info, webhook controller