use hmac.compare_digest if available