avutil/hmac: use av_freep() to avoid leaving stale pointers in memory