throw HSMErrors everywhere
(#343)