- link binaries to produce position-independent executables, and strip the
        flags used to do so, and library path flags, from the output of
        krb5-config
    - install shared libraries with the execute bit set
    - we used to override RPATH here, but configure takes --disable-rpath now