nss: make sure that NSS is initialized

... prior to calling PK11_GenerateRandom()