add security/ca_root_nss as dependency

which is needed to register descartes to github