I'm working on a Bitbucket Cloud app that installs a webhook url to receive webhook payloads. In my testing, I've manually set the webhook url and gotten the payloads I expect. However, when I connect my app to Bitbucket and set the webhook url via the app descriptor, the payloads appear to be encrypted via JWE
I've looked extensively through the Bitbucket Cloud integration documentation, but don't see this behavior documented anywhere. Can someone point me to the documentation for this? I assume the payload is encrypted with the shared secret given during the app registration flow, but would like to understand what's going on here.