Update capacity estimate with record timeframe

I'm setting up an activity webhook to perform some external automation whenever an epic duration is changed. One of the issues on my mind is that, as it is, this requires me to leave the receiving endpoint completely open. Is there any way I can authenticate Aha, e.g. through requiring a token be sent with the webhook?