Use `hash_hmac` if available

In addition to a little CS fix (in order to be consistent).