package: pbkdf2 2.0.1

`2.0.0` mis-included `instanbul` as a core dependency instead of development dependency.