rsaenh: Be more careful about when to hash HMAC key material.