drop NSS_SSL_CBC_RANDOM_IV=0; no longer necessary