That interface is a bit surprising. radsecproxy-hash(1) was indeed
bitten by it.

Also, make _format_hash() behave consistently even when out_len < 3.

Conflicts:
	fticks_hashmac.c

Split up fticks.c in order not to have to drag in too much of
radsecproxy in order to just hash a MAC.