This is where [signature checking](https://github.com/Shopify/shopify/blob/5eef2c6916bdb443917321c222d1592995148014/app/models/offsite_payment_gateway.rb#L66) should be happening.