bug 1085509 - fix nsCertOverrideService so its initialization doesn't depend on NSS r=mmc
bug 1085509 - add telemetry for how many permanent certificate overrides users have r=mmc r=jcj