make nssct --help actually useful