Make TsigVerify's MAC comparison take constant time

Also made minor cosmetic changes - fixed a typo and `[]byte(rawsecret)` confused me when I first read it.