do 2. before: convert (IP OP : Z), framework works now. HMAC has an unnecessary roundtrip in mkArg from Z -> Byte -> Z, so factoring that out now