Comment 5 for bug 932896

libnss is certainly well-vetted, but it's also important that the software calling the crypto library be trustable... is ceph in widespread use with libnss, or are we going to be guinea pigs here?