s3-waf: Link nss_wins only against needed subsystems.