@henningkerstan/hmac-authenticated-payload