The header_data variable is already defined in this function to
validate the HMAC, and re-using it makes it easier to read the
header checksum verification.