use a more readable config var name for the webhook secret