Add Secret to Config and - if set - check that the incoming request contains a matching secret URL query parameter