properly serialize hmac keys
decrypt hmac keys and clean up cruft/debug