gnutls: make p11-kit optional

p11-kit supports smartcards, which most macs don't have a slot for

Closes #26234.