pbkdf2: use pbkdf2-compat 2.0.0