As of now when we use incoming webhook for Jira automation we do not have any means to authenticate, which can allow anyone to send web requests if they know the URL 

We would like to be able to enforce authentication, credentials for which can be sent in the headers of the web request.