excludeKeys option does not treat nested keys correctly

[skarbovskiy]

{user: {"name":"bob", cookie: 1}, cookie: 'data to skip on hashing'}

hash(data, { excludeKeys: function (key) {
    return key === 'cookie';
})

will result in skipping both root cookie and user.cookie.