bump NSS to 3.16.4