pub(super) const MIN_PBKDF2_ITERATIONS: u32 = 10_000;
The floor the web client enforces inside its PBKDF2 primitive, so a server cannot talk us into deriving a weaker key than the client would.