cloudkeychain: use better pbkdf2, updated valid(), removed many FIXMEs