A secret Stripe uses to sign every webhook it sends you. Your server checks that signature to confirm the message really came from Stripe and wasn't forged by someone else.