add hmac around the entire file