1) Move the import, export, etc. (non network server mode) code to after the NSS/SSL init.  For example, import needs to hash passwords, export of encrypted attrs needs encryption.
    2) Only create, configure (for SSL) and bind TCP ports if running in regular or referral mode.  Before, the code short circuited if doing import, export, etc. before getting to the port stuff.  But since 1) above, the code needs to take care only to do network related stuff if in network mode.