nss: use a better API for controlling SSL version