We send payment.paid, payment.locked events with HMAC signature header X-BlockPay-Signature.