Catch write errors in NSS, when we can
    
    At startup-time, check for a suitable errno or PR_NO_ACCESS_RIGHTS_ERROR
    error, or if we're read-write, if opening readonly works.