package: pbkdf2 2.0.1

2.0.0 mis-included `instanbul` as a core dependency instead of development dependency.