cmake: fix linking when mbed TLS not in default paths