-use cherry-picked nettle patch -remove apparently inert -liconv libssh2 still needs libgcrypt though.