The issue was invalid metadata. One of the metadata values had a space in it.
//contrived example
var metadata = new Dictionary<string, string>();
metadata.Add("my-metadata", "no-worky "); // space at the end will cause the error
Trimming the metadata value fixed the MAC signature error.