Gerrit web-hook apiKey used as additional security layer to prevent accidental SCM scans.