The file "internal/issuer/auditlog/http_client.go" contains a hard coded authentic source in the audit log webhook:
[...]
as, ok := s.cfg.AuthenticSources["SUNET_v1"]
[...]
In order to avoid per-deployment forking, this value should preferably be read from some other source.