A few other changes: - use autoreconfHook instead of doing it manually - clean up with/enable flags - add support for PKCS11 entropy sources PKCS11 is not fully tested yet as my hardware hasn't arrived.