Add explicit buf arg to cli_check_sign_mac