Employing access control webhooks