gnutls-3.2: maintenance+security update

CVE-2014-8564 seems only DOS, so relatively non-critical.
stdenv lib64-moving: fail instead of overwriting

Silent overwriting is dangerous and it bit us straightaway on gcc_multi.
https://github.com/NixOS/nixpkgs/commit/51f1b4ec48d5