package: crypto-browserify must be specified until browserify catches up