hmac-sha1: muted warning found by ASAN. Warning due to access of password as 32 bit value, we can read 3 bytges past end.