throw HSMErrors everywhere
(#365)