It would be nice if another subpackage for nss could be made that provides the
tools not provided in nss-tools. They don't apply to most users because they
don't necessarily need them but I find them helpful. Maybe call it
nss-devel-tools or something.

I suppose it would be proper to just include all the binaries not in nss-tools
but the ones I'm most interested in are:

derdump
tstclnt
vfyserv
selfserv
ocspclnt

If you want to be more discriminating, I believe the *test tools are just used
in the NSS test suite

instinit and newuser I believe are just for software FORTEZZA.

Probably not much call for either of these sets of binaries.