NSS needs to be told that its sockets are nonblocking

Apparently NSS does not automatically realize that its SSL sockets are nonblocking when you construct them around a nonblocking TCP socket. You have to make them nonblocking yourself.

Found while investigating #40018 (closed). Root cause of #40018 (closed).