hiawatha: use bundled polarssl for now