nss/tests/NSS-tools-should-not-use-SHA1-by-default-when