Use HMAC to validate the namespace from the origin server.