note about CF APIs
Don't build GSS mechanism by default
Don't warn if shib/etc not found