Hm, that doesn't make a lot of sense to me. If you sign it with a privkey, you can check auth with the pubkey. HMAC there also is just plain overhead, and if you're going to do HMAC without a key, then you can just use the hash directly.