Prefer hmac-sha2-256 over hmac-sha2-512

As requested from the comments of the pull-request.