server: add HMAC support