HMAC protection for ILL requests