it works -- hmac that is