#959 Reply-tag wire address should use a keyed HMAC, not a plain hash

EARS: The wire reply tag shall be HMAC(server secret, tenant_id, tag) so a third party who knows a tenant id and a guessable tag cannot compute the reply address. From #950 review.