chrony: drop nss and use libtomcrypt instead for the benefit of cross builds.