Creates an outbound webhook subscription for a single event type. webhook_url, webhook_name, webhook_event_type, basic_auth_username, basic_auth_secret and hmac_secret are all required. The event type must be one the Developer Partner is entitled to (see GET /api/webhook/v1/supported_event_types) and only one active subscription per event type is allowed. Stored secrets are returned masked.