hmac based paths seem stable now