Add hmac check to keys encrypted with a passphrase derived key