if you specify an Authentication key (auth_key in the payload) when creating your subscription then in the response of every webhook it will be provided as the x-api-key so that you can check the authenticity of the webhook.Updating or remvoing the Authentication key will take immedieat effect on all webhooks (replays and new).