support checking MACS for provided keys