While triaging lcms-related bugs I saw that cegui-mk2 does not actually use lcms:
If built in a pdebuilder environment with and without lcms entered as B-D the binary
result byte-identical. Same also when additionally dropping libmng-dev, which would also
pull in lcms.
Therefore I assume that it is safe to drop B-D on liblcms and libmng.