Fix mit-krb5: use autoconf to detect if openssl was built with cms support instead of relying on version numbers.