The RFC also says you can use a longer key by hashing it first. Should you mention that as an option?