rework sig4 hmac_sha256 and co