just to clarify, do you mean give them the /call endpoint spec and a public api key, versus giving them a make.com webhook endpoint and secret, which will then handle calling the /call endpoint?