Verify HMACs on decryption.