Add sodium cflags to am_cflags
Disable json support until it is stable.
Fix a bug in verifying third-party caveats