Update ca_root_nss
Make ca_root_nss for Arch=any