The NSS support code in SunPKCS11 currently always initializes NSS in read-write mode. NSS also supports read-only and no-db mode. We should introduce a new config file keyword to support those modes.

In addition, recent versions (3.9.2+) of NSS include a function NSS_IsInitialized. We should utilize it, if available.