Add hash_compare() to perform string comparisons that are not vulnerable to timing attacks.