hi Dale,
The 2mA you're measuring could be a contribution of the load hanging off the VDDEXT domain. Unless this is a USB bus powered design I would recommend only powering VDDUSB from VBUS when VDDINT is off.
The absolute maximum current draw you should see on USB_VBUS pin is 130 uA.
Regards,
Jorge