security/{,ca_root_}nss: update to 3.20

No CA root changes, just chasing NSS version.

Changes: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.20_release_notes