Secure PIN handling using NSS crypto