s3-waf: convert LIBGPO into a subsystem.