Set inline content disposition for certain mime types
Don't verify HMAC if shared key is null