const ftw
ensure we don't read too far into our name buffer
add hmac api