use system heimdal headers if possible, fix missing dependencies on hx509 and krb5...