root/pypi: links for hmac-signature