teardown tls right before toggling the nss patch
toggle patch when url matches that in the urlbar