-> install build deps:
$ tce-load -wi compiletc openssl-1.1.1-dev lzo-dev linux-pam-dev

-> copy linux-pam-dev files where 'make' can find them
# mkdir /usr/local/include/security
# cp /usr/local/include/*pam* /usr/local/include/security

-> per TC wiki, for maximum compatibility:
export CFLAGS="-mtune=generic -Os -pipe"
export CXXFLAGS="-mtune=generic -Os -pipe"
export LDFLAGS="-Wl,-O1"

-> the usual:
$ ./configure --prefix=/usr/local
$ make