Apparently, there's no way for npm to create reproducible builds using package lock files and no optional dependencies, so we should remove sodium-native from the optional dependencies and use the node-forge implementation for old versions of node.js.