crypto/pbkdf2_sha1: reduce rounds to 65536 (0x10000)

This is the maximum that Cyrus SASL hardcodes. (Idiots.)