protected static function _signature($data, $secret = null) { unset($data['__signature']); $secret = $secret ?: static::$_secret; return hash_hmac('sha1', serialize($data), $secret); }