do not directly manage openssl package

Add require_openssl param to nssdb class to enable/disable requiring the
`openssl` class.