crypto/pbkdf2: reduce rounds to 65536 (0x10000)

This is the maximum that Cyrus SASL hardcodes. (Idiots.)