document HMAC stuff