s3-waf: Link ntlm_auth only against needed subsystems.