gecko mainly maintains ports around www/firefox, not everything Mozilla-related that may have some code from there e.g., lang/spidermonkey*. As security/ca_root_nss neither affects www/firefox nor security/nss let's slightly reduce the scope of mostly inactive team.
Bug 189811 demonstrated the port needs an agressive/active maintainer. So, back out rP283208. The only thing to lose is gecko may not be able to sync-update together with security/nss.