- explicitly setting rpath for -lxacml which solves debian-5 problem, which doesn't automatically set rpath from -L