It does appear that there is code by Paul Walker included in the binary release even though DO_DER is not defined.
Grep the source for PW These parts would probably need to be stripped out too. Using repack to create a +dfsg orig tarball in the same way as mysql-server might work (I'm working on a patch for that now, but the PW entries make that a little messy).
