upgrade polarssl to 1.3.2; drop testsdir; add distdir target; make sure make check does not abort
again add -fPIC so we can build PIE executables, for better security