fix(hmac-auth): pass ctx when hiding the Authorization header (#13820)