[rpm] Use the system NSS CA trust library instead of the bundled copy