I've attached patches to fix this. First, a patch to create an otherwise equivalent package variant and to use it in GnuTLS, and a second patch to actually update the public net-tools variable. Is this the right way to create the test-only package variant for now?