Add kernel-only flag, which skips building hypercalls.

This is useful for environments such as Xen where the default POSIX
hypercall implementations are not valid.

TODO: there is still some extra probing going on -- a "target" does
not really exist for -k builds.