Scoping test tools

Co-authored-by: Glenn Gailey <[email protected]>

Author: mattchenderson

articles/azure-functions/functions-bindings-http-webhook-trigger.md

@@ -1237,7 +1237,7 @@ Webhook authorization is handled by the webhook receiver component, part of the
 
 ## Invoke HTTP triggers
 
-You can invoke your HTTP-triggered functions using an HTTP client. The examples in this section use [`curl`](https://github.com/curl/curl), but you can use any HTTP client of your choice.
+You can invoke your HTTP-triggered functions using an HTTP client. The examples in this section use [`curl`](https://github.com/curl/curl), but you can use any HTTP client tool that keeps your data secure. For more information, see [HTTP test tools](functions-develop-local.md#http-test-tools).
 
 The request you need to make might be different between a local version of your code and when hosted in Azure. By default, when you run your project using the Azure Functions Core Tools, access key authorization requirements are removed. However, any requirements you've configured will still be enforced when hosted.