Use hmac.Equal.

It makes a lot more sense than `crypto/subtle`.