curl NSS client-side