Docs
Connect, webhook signing secret, no card data.
Unsigned events are discarded. Card data is never stored.