hey there ! Anyone has a way to add an extra layer of security to the calls made to the server_url in the tools ? i saw that the x-vapi-secret is a way to add a secret and validate that secret to "know" the request is coming from vapi. but i find this method not so secure, anyone did something around this in the past? Thank you in advance !