Better concurrency

Avoids a deadlock and is a little more aggressive about protecting NSS
initialization code from being stomped on by concurrent tasks.