If there is no support for token authentication, consider implementing it by following [these directions](https://docs.github.com/en/developers/webhooks-and-events/webhooks/securing-your-webhooks). is mis-leading because users do not control the authentication support: the webhook service is often provided by a 3P entity.