initializing NSS to make the old NSS cert validation APIs use the new libpkix cert validation engine internally. r=kaie.