need libutil's util.h (not our own) for bcrypt_pbkdf()