If secret is provided, event payload hash will be verified in TFS service. Recommended to add secret always for webhook.