s4: don't rebuild all of heimdal when dynconfig options change