fix: enforce auth hook secrets conform to standard webhooks

fix: enforce auth hook secrets conform to standard webhooks #5460