Once you start using the `webhooks` model, security will be handled for you. `webhook#call` creates a JWT for the request and sticks it in the Authorization header of the outgoing request so the recipient can verify it.