Webhooks - what's the worst that could happen?