This should be done with the HMAC class rather than calling the backend directly.