Allow Tor to build with NSS instead of OpenSSL

If we do this, it will be a great way to reduce our download size, since TB already requires NSS.