recommend random generation for hmac key