new hmac module. wraps OpenSSL::HMAC but tries to enforce good key

practices