s3: make linking of cifs.upcall --as-needed safe