@justinsheehy Makes sense – so the security level of HMAC usage as in PostCommitWebHooks is in between Basic's and Digest's.