fn pbkdf2(secret: &[u8], salt: &[u8], iterations: u32) -> Zeroizing<[u8; 32]>
PBKDF2-HMAC-SHA256, 32 bytes (RFC 8018).