webhookz

POST to /webhookz/<id> to capture. GET the same URL to inspect. Pass ?secret=... to have the server verify X-CRT-Signature.