[nss-pem] some initial cleanup for PEM