nss: let nss_{cache,load}_crl return CURLcode