Refactor TLS1-PRF to create the MAC contexts early