s4-waf: disable_gnutls is gone