Try to make the examples of verifying an HMAC/CMAC clearer -- refs #1259