Not thread-safe

[drallgood]

The crypto libraries are not thread-safe.

Thus, it's not recommended to create a HMAC verifier/signer as singleton. We need to either:

• update the documentation to make sure people understand that this is happening
• Make the HMAC classes (HmacVerifier, HmacSigner, KeyAware) thread-safe