conditionally build certhash into openssl(1) For now, look for openat and symlink. We may switch to just needing symlink later.