cmake: make sure headers are not in api/ subdir