Enable updates-testing repo

Make sure updates-testing repo is enabled. As a result,
downgrading of nss packages is no longer necessary.