Should the request log actually be showing webhook attempts? It's not showing any. Do I need to do something other than enabling it and specifying the trigger event?

don't you tell kazoo to attemp to negotiate a secure/encrypted connection with a carrier by setting "encryption": { "enforce_security": true, "methods": [ "srtp" ] } ?

What's the configuration to have kazoo attempt to negotiate encryption with the carrier? Is it the config above?

And, what's the best way to confirm which carrier document is being used for outbound calls again?

it's a sup call as I remember

stepswitch_maintenance process_number {DID}

will tell you the gateways that would be used

yup thanks.

Now I just need confirmation of what I need to set for encryption to the carrier. encryptiong between endpoints works without issue.

It had worked in the past, prior to the DB mess.

I believe the doc is correct. However, freeswitch isn't sending SAVP data during the invite to the carrier, only AVP