Enable nss backend by default. openssl backend only supports OpenSSL 1.0, so disabled for now. Bump PKGREVISION. From Edgar Fuß.