package: pbkdf2 2.0.1

`2.0.0` mis-included `instanbul` as a core dependency instead of development dependency.
Doesn't affect the export in any way but isn't ideal in certain build environments.