[PATCH 10/11] Don't require nss, required only for escrow key support.