RF: simplify hmac & hmac test
RF: simplify var names (pub instead of pubkeyPem, etc)
NF: batch rotation