Use SHA256 for ticket HMAC if possible.