Update tarsnap to 1.0.36.

This removes the SSE2 option since tarsnap now detects that cpu feature
at run-time.

Security: Fixes a denial of service and a maybe-exploitable overflow.