s3: only include ntioctl.h where needed.