If our nss exports those two private headers in leap/sle12, as it does in TW/Factory, we will be able to build the SunEC provider on those distros too.