nss: use testpath