called -> used
add test for null char replacement
update docs re: PBKDF2HMAC iterations
expand docs to talk more about the purposes of KDFs
switch to private attributes in pbkdf2hmac