generate hmac secret when generating host