hostapd: properly build hostapd-only SSL variants