the default build on Linux (because it requires -lcrypt which isn't
availabel everywhere).

Some improvements to the _tkinter build line suggested by Case Roole.