tiny change: hmac/3 instead outdated sha_mac/2