adapt to nssdb -> nstools rename + API changes