heimdal: Force building against internal hcrypto

This allows us to build packages like samba4 which rely on that specific
cryptographic implementation. Additionally, add a meta attrset.
samba4: Try heimdal