Use locally built libreSSL if targeting NaCl instead of the host's versions.

Can't it at least do the same lookup we're doing here and bail out?