crypto Use dev-libs/nettle as crypto backend Add support for PKCS#11 through app-crypt/p11-kit Build libgnutls-dane, implementing DNS-based Authentication of Named Entities. Requires net-dns/unbound. Disallow building LZO support, because of a license incompatibility with dev-libs/lzo.