Does Jira support any kind of authentication back to the webhook endpoint?  It'd be great to have some kind of authentication/verification on this traffic, otherwise it opens up an endpoint to spammers.