can crypto.createHmac's "key" param take a Buffer?