move hmac setting to flags on cipher context