- switch back to system nss - set enable-release independent of target - enable rust-simd for supported targets