switching to nss for testing