[build] allow optional build of nss crypto support
Signed-off-by: Fabio M. Di Nitto <fdinitto@redhat.com>