One could just take Debian's initscripts and conffiles.

Well, maybe it's enough to just fiddle with the source .deb's Depends: and Build-Depends: lines. If not, I presume that ./configure --disable-nss did the trick?