require nettle, following removal of libcrypt from glibc