pdfsig: add -nssdir option
Contains code inspired in code by Hans-Ulrich Jüttner and Adrian Johnson
This is a better version of !124 (ac4252b0) and !124 (c4fc78fa)
you can only init nss once, so having the nssdir be a parameter of the validateSignature
method makes no sense since only the first one would "win"