xpc: use -idirafter to build against openssl headers from /usr/include