s4-waf: sanitize library names like the old build system did, only add