rmvpkg: nss-no-cnnic and ca-certificates-no-cnnic fixes #32 and #33