xulrunner: use homebrew provided nss