Only add extra libs (including OpenSSL) where needed - often only
to john itself. Closes #606.
Improve AC handling of CommonCrypto. If we have SHA2 in CommonCrypto
but not in OpenSSL, we'll now detect it.
Add --with-commoncrypto and --without-openssl options. JtR can be built
with either or both.