Using kdf_iter of 4000 (new default in 3.x is too slow / also that way we can open 2.x databases without needing to do a pragma cipher_migrate)