Now that 12.3 is the minimum supported, remove ca_root_nss hard deps. For systems that have caroot, ca_root_nss is to my knowledge vestigial and unused, and does nothing except install things.
