Merge "Make sure hash_hmac() always works even if no secret key"