Free NSS objects in --external-ca scenario
    
    In external CA installation, ipa-server-install leaked NSS objects
    which caused an installation crash later when a subsequent call of
    NSSConnection tried to free them.
    
    Properly freeing the NSS objects avoid this crash.
    
    https://fedorahosted.org/freeipa/ticket/3773