Add hmac auth to key handler