Signature utility around `crypto/hmac`