Require 3.41.0-3 on Fedora 28
    
    nss-3.41.0-3.fc28 fixes an issue with p11-kit crypto policy that caused
    OpenLDAP to fail when SoftHSM2 is installed. The build is available in
    Fedora updates-testing and @freeipa/freeipa-master COPR.
    
    nss-3.41.0-1.fc29 is available in F29 stable.
    
    See: https://pagure.io/freeipa/issue/7810
    Signed-off-by: Christian Heimes <cheimes@redhat.com>
    Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>