Change the hmac that protect sudopassword entries to also hash the purpose