Upon receiving the webhook post request we hash the request body using
HMAC-SHA12 and our signature key (to binary) and then compare the result
with the X-ANET header hash sent. Sometimes it matches, sometimes it
does not. This only happens with prod...