curl_sasl: initialize NSS before using crypto